CVE-2023-43556: Buffer Copy Without Checking Size of Input in Hypervisor
Published Jun 3, 2024
·Updated
Memory corruption in Hypervisor when platform information mentioned is not aligned.
Affected Software
137 affected components
Google Android
All of the following
Qualcomm Ar8035 Firmware
Qualcomm Ar8035
All of the following
Qualcomm Fastconnect 6700 Firmware
Qualcomm Fastconnect 6700
All of the following
Qualcomm Fastconnect 6900 Firmware
Qualcomm Fastconnect 6900
All of the following
Qualcomm Fastconnect 7800 Firmware
Qualcomm Fastconnect 7800
All of the following
Qualcomm Flight Rb5 5g Firmware
Qualcomm Flight Rb5 5g
All of the following
Qualcomm Qam8295p Firmware
Qualcomm Qam8295p
All of the following
Qualcomm Qca6391 Firmware
Qualcomm Qca6391
All of the following
Qualcomm Qca6574au Firmware
Qualcomm QCA6574AU
All of the following
Qualcomm Qca6595 Firmware
Qualcomm Qca6595
All of the following
Qualcomm Qca6696 Firmware
Qualcomm Qca6696
All of the following
Qualcomm Qca6698aq Firmware
Qualcomm Qca6698aq
All of the following
Qualcomm Qca8081 Firmware
Qualcomm QCA8081
All of the following
Qualcomm Qca8337 Firmware
Qualcomm Qca8337
All of the following
Qualcomm Qcm4490 Firmware
Qualcomm Qcm4490
All of the following
Qualcomm Qcm5430 Firmware
Qualcomm Qcm5430
All of the following
Qualcomm Qcm6490 Firmware
Qualcomm Qcm6490
All of the following
Qualcomm Qcn6024 Firmware
Qualcomm Qcn6024
All of the following
Qualcomm Qcn9011 Firmware
Qualcomm Qcn9011
All of the following
Qualcomm Qcn9012 Firmware
Qualcomm Qcn9012
All of the following
Qualcomm Qcn9024 Firmware
Qualcomm Qcn9024
All of the following
Qualcomm Qcs4490 Firmware
Qualcomm Qcs4490
All of the following
Qualcomm Qcs5430 Firmware
Qualcomm Qcs5430
All of the following
Qualcomm Qcs6490 Firmware
Qualcomm Qcs6490
All of the following
Qualcomm Qcs7230 Firmware
Qualcomm Qcs7230
All of the following
Qualcomm Qcs8250 Firmware
Qualcomm Qcs8250
All of the following
Qualcomm Qrb5165m Firmware
Qualcomm Qrb5165m
All of the following
Qualcomm Qrb5165n Firmware
Qualcomm Qrb5165n
All of the following
Qualcomm Qsm8350 Firmware
Qualcomm Qsm8350
All of the following
Qualcomm Video Collaboration Vc3 Platform Firmware
Qualcomm Video Collaboration Vc3 Platform
All of the following
Qualcomm Video Collaboration Vc5 Platform Firmware
Qualcomm Video Collaboration Vc5 Platform
All of the following
Qualcomm Robotics Rb5 Firmware
Qualcomm Robotics Rb5
All of the following
Qualcomm Sa8295p Firmware
Qualcomm Sa8295p
All of the following
Qualcomm Sa8540p Firmware
Qualcomm Sa8540p
All of the following
Qualcomm Sa9000p Firmware
Qualcomm Sa9000p
All of the following
Qualcomm Sd888 Firmware
Qualcomm Sd888
All of the following
Qualcomm Sdx57m Firmware
Qualcomm Sdx57m
All of the following
Qualcomm Sm7315 Firmware
Qualcomm Sm7315
All of the following
Qualcomm Sm7325p Firmware
Qualcomm Sm7325p
All of the following
Qualcomm Snapdragon 4 Gen 2 Mobile Firmware
Qualcomm Snapdragon 4 Gen 2 Mobile
All of the following
Qualcomm Snapdragon 778g 5g Mobile Firmware
Qualcomm Snapdragon 778g 5g Mobile
All of the following
Qualcomm Snapdragon 778g\+ 5g Mobile Firmware
Qualcomm Snapdragon 778g\+ 5g Mobile
All of the following
Qualcomm Snapdragon 780g 5g Mobile Firmware
Qualcomm Snapdragon 780g 5g Mobile
All of the following
Qualcomm Snapdragon 782g Mobile Firmware
Qualcomm Snapdragon 782g Mobile
All of the following
Qualcomm Snapdragon 7c\+ Gen 3 Compute Firmware
Qualcomm Snapdragon 7c\+ Gen 3 Compute
All of the following
Qualcomm Snapdragon 8 Gen 1 Mobile Firmware
Qualcomm Snapdragon 8 Gen 1 Mobile
All of the following
Qualcomm Snapdragon 8\+ Gen 1 Mobile Firmware
Qualcomm Snapdragon 8\+ Gen 1 Mobile
All of the following
Qualcomm Snapdragon 888 5g Mobile Firmware
Qualcomm Snapdragon 888 5g Mobile
All of the following
Qualcomm Snapdragon 888\+ 5g Mobile Firmware
Qualcomm Snapdragon 888\+ 5g Mobile
All of the following
Qualcomm Sc8280xp-abbb Firmware
Qualcomm Sc8280xp-abbb
All of the following
Qualcomm Snapdragon Ar2 Gen 1 Firmware
Qualcomm Snapdragon Ar2 Gen 1
All of the following
Qualcomm Snapdragon X65 5g Modem-rf Firmware
Qualcomm Snapdragon X65 5g Modem-rf
All of the following
Qualcomm Snapdragon X70 Modem-rf Firmware
Qualcomm Snapdragon X70 Modem-rf
All of the following
Qualcomm Ssg2115p Firmware
Qualcomm Ssg2115p
All of the following
Qualcomm Ssg2125p Firmware
Qualcomm Ssg2125p
All of the following
Qualcomm Sxr1230p Firmware
Qualcomm Sxr1230p
All of the following
Qualcomm Sxr2230p Firmware
Qualcomm Sxr2230p
All of the following
Qualcomm Wcd9370 Firmware
Qualcomm Wcd9370
All of the following
Qualcomm Wcd9375 Firmware
Qualcomm Wcd9375
All of the following
Qualcomm Wcd9380 Firmware
Qualcomm Wcd9380
All of the following
Qualcomm Wcd9385 Firmware
Qualcomm Wcd9385
All of the following
Qualcomm Wcn3950 Firmware
Qualcomm Wcn3950
All of the following
Qualcomm Wcn3988 Firmware
Qualcomm Wcn3988
All of the following
Qualcomm Wcn6740 Firmware
Qualcomm Wcn6740
All of the following
Qualcomm Wsa8810 Firmware
Qualcomm Wsa8810
All of the following
Qualcomm Wsa8815 Firmware
Qualcomm Wsa8815
All of the following
Qualcomm Wsa8830 Firmware
Qualcomm Wsa8830
All of the following
Qualcomm Wsa8832 Firmware
Qualcomm Wsa8832
All of the following
Qualcomm Wsa8835 Firmware
Qualcomm Wsa8835
Event History
Jun 3, 2024
CVE Published
via Android·12:00 AM
CVE Published
via MITRE·10:05 AM
Data Sourced
via MITRE·10:05 AM
DescriptionSeverityWeakness
Data Sourced
via NVD·10:15 AM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2023-43556?
CVE-2023-43556 is categorized as a high severity vulnerability due to its potential for memory corruption in the hypervisor.
2
How do I fix CVE-2023-43556?
To fix CVE-2023-43556, users should apply the latest firmware updates from Qualcomm or relevant vendors to mitigate the vulnerability.
3
What products are affected by CVE-2023-43556?
CVE-2023-43556 affects various Qualcomm firmware including Android devices and specific Qualcomm chipsets.
4
What type of vulnerability is CVE-2023-43556?
CVE-2023-43556 is classified as a memory corruption vulnerability that can impact hypervisor functionalities.
5
Is CVE-2023-43556 exploitable remotely?
CVE-2023-43556 may be exploitable by attackers with access to the affected platforms, making it critical to apply patches.